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J . In the invention as recited in the claims of the above-idenlif led patent application, the trusted 
platform module ("TPM") is used to do the signature verification of the update to program, and also 
enables the flash memory to receive the update. This makes the process of putting a tampered update 
to the program in the Hash memory much more difficult. 

2. In an example where a TPM does not directly unlock the flash memory unit, there must be a 
software interface that is used to unlock the flash memory unit, even if signature verification is 
performed on the program update to be loaded. Once this software interface is understood, it would 
then be a fairly simple matter of programming to write an application that can unlock the flash memory 
unit and store anything that is desired within the memory unit. 

3. In contrast, within the present invention as claimed, where the TPM directly unlocks the flash 
memory unit, storing a tampered image (or program update) within the flash memory unit is much 
more difficult. In addition to figuring out the software interface to unlock the flash memory unit, the 
person attempting to store a tampered image must also figure out how to fool the TPM into thinking 
die image and update arc authentic. That would mean that such an attacker on the system would have- 
to present both an authentic image and the individual users authentication information to the TPM 
before the TPM would unlock the flash memory unit. This is signifieantly harder to do than in the case 
without using the TPM, 

4. Gmwrock teaches verification of the BIOS image after it has already been stored in the flash 
memory unit. The present invention verifies the BIOS image before allowing it to be stored in the 
flash memory unit and unlocking the memory unit. 

I hereby declare dial all statements made herein of my own knowledge are true and thai all statements 
made on information and belief are believed to be true; and farther tiiat these statements were made 
with the knowledge that will fill false statements and the like so made are punishable by fine or 
imprisonment, or both, under Section 1001 of Title 18 of the United Stales Code, and thai sueh willful 
false statements may jeopardize the validity of the application, any patent issuing thereon, or any 
patent to which this Declaration is directed. 
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